To enhance the security of our cloud services, SAP is updating the root certificate authority (CA) for various services, including the SAP BTP, Cloud Foundry environment, SAP BTP, ABAP environment, and SAP HANA Cloud. We are transitioning our server certificates signed by DigiCert Global Root G2 and G1/G5 cross-signed CAs to the newer and more secure “DigiCert TLS RSA4096 Root G5” CA, as DigiCert will stop signing new server certificates with the old root certificate.
This change is necessary to align with the latest industry security standards and recommendations, which call for stronger cryptographic keys. The new G5 certificate chain uses RSA-4096, providing a higher level of security for your connections.
What Does This Mean for You?
If you have client applications or services that connect to SAP HANA Cloud, you may need to take action to ensure a seamless transition and avoid connection failures.
Call to Action: Review the official notes and update your Trust Stores as needed
To prevent any disruption to your services, it is crucial that you update the trust stores for your client applications and services, as needed. Please review the officially provided SAP notes, giving more guidance:
SAP Note 3397584: HANA Cloud Connections will switch from “DigiCert Global Root CA” to “DigiCert TLS RSA4096 Root G5”SAP Note 3399573: HANA Cloud Switch of DigiCert Root Certificate
Rollout Timeline
The switch to the G5 root CA for existing SAP HANA Cloud regions is planned for the second quarter of this year. The timeline for your landscape will be communicated via established communication channels begin of March. This blog post will also be updated with further information once available.
Further Information and References
As the root certificate change is not only impacting SAP HANA Cloud usage, but also other SAP BTP services, we highly recommend reviewing the below mentioned references/notes, to ensure the highest degree of business continuity:
SAP Note 3566727: Root Certificate Replacement in the SAP BTP, Cloud Foundry EnvironmentBlog Post: SAP BTP Cloud Foundry: Switching to higher security level Root Certificate AuthorityBlog Post: SAP BTP ABAP Environment – New Root Certificate AuthorityGitHub: SAP BTP Trust Store
To ensure your applications continue to operate smoothly and securely, we suggest you take the necessary steps to update your trust stores as soon as possible.
Thanks,
To enhance the security of our cloud services, SAP is updating the root certificate authority (CA) for various services, including the SAP BTP, Cloud Foundry environment, SAP BTP, ABAP environment, and SAP HANA Cloud. We are transitioning our server certificates signed by DigiCert Global Root G2 and G1/G5 cross-signed CAs to the newer and more secure “DigiCert TLS RSA4096 Root G5” CA, as DigiCert will stop signing new server certificates with the old root certificate.This change is necessary to align with the latest industry security standards and recommendations, which call for stronger cryptographic keys. The new G5 certificate chain uses RSA-4096, providing a higher level of security for your connections.What Does This Mean for You?If you have client applications or services that connect to SAP HANA Cloud, you may need to take action to ensure a seamless transition and avoid connection failures.Call to Action: Review the official notes and update your Trust Stores as neededTo prevent any disruption to your services, it is crucial that you update the trust stores for your client applications and services, as needed. Please review the officially provided SAP notes, giving more guidance:SAP Note 3397584: HANA Cloud Connections will switch from “DigiCert Global Root CA” to “DigiCert TLS RSA4096 Root G5″SAP Note 3399573: HANA Cloud Switch of DigiCert Root CertificateRollout TimelineThe switch to the G5 root CA for existing SAP HANA Cloud regions is planned for the second quarter of this year. The timeline for your landscape will be communicated via established communication channels begin of March. This blog post will also be updated with further information once available. Further Information and ReferencesAs the root certificate change is not only impacting SAP HANA Cloud usage, but also other SAP BTP services, we highly recommend reviewing the below mentioned references/notes, to ensure the highest degree of business continuity:SAP Note 3566727: Root Certificate Replacement in the SAP BTP, Cloud Foundry EnvironmentBlog Post: SAP BTP Cloud Foundry: Switching to higher security level Root Certificate AuthorityBlog Post: SAP BTP ABAP Environment – New Root Certificate AuthorityGitHub: SAP BTP Trust StoreTo ensure your applications continue to operate smoothly and securely, we suggest you take the necessary steps to update your trust stores as soon as possible.Thanks, Read More Technology Blog Posts by SAP articles
#SAP
#SAPTechnologyblog
